CVE-2022-46849

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page – Responsive Coming Soon & Maintenance Mode: from n/a through 1.5.9...

Coming Soon < 1.6.0 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Description Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar Coming Soon Page – Responsive Coming Soon & Maintenance Mode allows SQL Injection.This issue affects Coming Soon Page – Responsive Coming Soon & Maintenance Mode: from n/a...

OPENSUSE-SU-2023:0352-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

OPENSUSE-SU-2023:0351-1 Security update for virtualbox

This update for virtualbox fixes the following issues: - Version bump to VirtualBox 7.0.12 released October 17 2023 by Oracle Fixes the following: - CVE-2023-22098 boo1216363 - CVE-2023-22099 boo1216364 - CVE-2023-22100 boo1216365 This is a maintenance release. The following items were fixed and/...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2023:0352-1 Rating: important References: 1215463 1216363 1216364 1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 NVD : 7.3...

Security update for virtualbox (important)

openSUSE Security Update: Security update for virtualbox Announcement ID: openSUSE-SU-2023:0351-1 Rating: important References: 1216363 1216364 1216365 Cross-References: CVE-2023-22098 CVE-2023-22099 CVE-2023-22100 CVSS scores: CVE-2023-22098 NVD : 7.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:H...

Important: Red Hat Security Advisory: Node Maintenance Operator 5.2.1 security update

This is an updated version of the Node Maintenance Operator. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Important: Red Hat Security Advisory: Node Maintenance Operator 5.0.1 security update

This is an updated version of the Node Maintenance Operator. This Operator is delivered by Red Hat Workload Availability. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

Code injection

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

PT-2023-29814 · Unknown · Thingnario Photon

Name of the Vulnerable Software and Affected Versions: ThingNario Photon version 1.0 Description: An issue in the software allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function at the "thingnario Logger Maintenance Webpage" endpoint...

CVE-2023-46055

An issue in ThingNario Photon v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted script to the ping function to the "thingnario Logger Maintenance Webpage" endpoint...

mantis -- multiple vulnerabilities

Mantis 2.25.8 release reports: Security and maintenance release 0032432: Update guzzlehttp/psr7 to 1.9.1 CVE-2023-29197 0032981: Information Leakage on DokuWiki Integration CVE-2023-44394...

Maintenance Switch <= 1.5.2 - Theme Files Creation/Deletion via CSRF

Description The plugin does not have CSRF checks when creating and deleting theme files as well as reseting settings, which could allow attackers to make logged in admins perform such actions via CSRF attacks...

CVE-2023-43960

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

CVE-2023-43960

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

Design/Logic Flaw

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

Session Fixation

uptime-kuma is vulnerable to Session Fixation. The vulnerability is caused by a lack of session token invalidation in the server.js authentication middleware. This allows attackers with a token to maintain access even after the user's password changed...

D-Link DPH-400SE Security Vulnerability

The D-Link DPH-400SE is an IP phone from China AUO D-Link. A security vulnerability exists in the D-Link DPH-400SE FRU version 2.2.15.8, which originated from a vulnerability that allows remote attackers to escalate privileges via the user modification feature in the Maintenance/Access feature...